Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
File: ss0DX6sYpLeCYURWP2DniYpO8PE.mft (raw, json)
Hash identifier: WHP5poGnRdURMNRImzwWzOHgdOuql0qGOrxIOaAaDsQ=
Subject key identifier: FC:E1:7F:4A:EE:77:64:49:85:3D:7B:DE:6F:E1:57:7C:ED:79:A7:BD
Authority key identifier: B2:CD:03:5F:AB:18:A4:B7:82:61:44:56:3F:60:E7:89:8A:4E:F0:F1
Certificate issuer: /CN=b2cd035fab18a4b7826144563f60e7898a4ef0f1
Certificate serial: 0198488972F6AA218FC3DCEDB76E6B4A8D6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
Manifest number: 111D
Signing time: Sat 26 Jul 2025 21:00:24 +0000
Manifest this update: Sat 26 Jul 2025 21:00:24 +0000
Manifest next update: Sun 27 Jul 2025 21:00:24 +0000
Files and hashes: 1: 8ioI1P3WjfVGZeocJzXjV25zEAM.roa (hash: R5/GZ5yigab2BnvLmrfCDXR0klk9Au0FN2fkvOAY+V4=)
2: ss0DX6sYpLeCYURWP2DniYpO8PE.crl (hash: uDzX+c3a/0vJEvT4BLdW4pRBFbW6NwLbiB57tGIG7so=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:72:f6:aa:21:8f:c3:dc:ed:b7:6e:6b:4a:8d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2cd035fab18a4b7826144563f60e7898a4ef0f1
Validity
Not Before: Jul 26 21:00:24 2025 GMT
Not After : Jul 27 21:00:24 2025 GMT
Subject: CN=fce17f4aee776449853d7bde6fe1577ced79a7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1b:4c:53:ca:84:3f:f6:86:17:01:7c:af:0f:
22:1e:6d:ca:da:ef:c3:a8:fe:f4:0e:8c:81:94:d3:
86:10:ea:ec:17:aa:4d:84:eb:bc:47:aa:1e:07:d2:
1e:2a:57:a9:de:bf:20:e1:0f:fa:e9:68:ad:da:ff:
1c:8e:dd:d4:8e:be:1a:3d:80:97:d1:12:3f:22:e2:
99:57:74:4b:49:14:bd:ac:3d:73:e6:2d:97:70:a6:
0b:b4:32:2f:db:00:17:68:5d:32:c7:b0:99:7d:91:
b4:29:58:01:0b:2d:e3:80:b5:0e:ff:4b:54:4f:24:
9b:d5:1c:99:65:ff:b1:8d:a4:5c:2d:14:50:4f:b7:
4a:b5:d8:9a:12:90:73:5b:e4:33:77:e1:52:5e:c9:
3c:66:e5:da:48:b6:93:10:94:ee:6d:eb:3f:4d:a8:
95:c5:52:f7:40:58:78:50:64:ab:b4:9e:ba:e1:a4:
f8:e8:0b:97:b9:b4:2e:1b:72:f5:a3:a3:d4:ef:ea:
aa:4e:a6:5f:3f:1e:e3:fb:dc:dc:2b:a6:de:84:e9:
9f:75:5a:d5:a0:92:79:d5:df:b7:96:ef:d8:42:e4:
96:f1:bc:75:5c:e0:94:24:1d:10:36:86:ec:dc:68:
61:9d:45:34:85:07:ca:90:39:e5:1c:ec:be:96:71:
93:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E1:7F:4A:EE:77:64:49:85:3D:7B:DE:6F:E1:57:7C:ED:79:A7:BD
X509v3 Authority Key Identifier:
keyid:B2:CD:03:5F:AB:18:A4:B7:82:61:44:56:3F:60:E7:89:8A:4E:F0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ss0DX6sYpLeCYURWP2DniYpO8PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/33154b-2941-4f70-8133-d48450521dd9/1/ss0DX6sYpLeCYURWP2DniYpO8PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:dc:42:23:6c:ca:90:53:be:2d:ea:9c:0c:0f:aa:7e:db:69:
bf:56:70:5b:d9:23:8a:76:25:ec:42:f4:33:16:d8:0e:63:d6:
73:3f:e3:3d:e2:a2:fd:5e:32:f5:ef:38:f8:90:f1:cc:a9:a0:
bf:23:0f:d6:3e:68:51:15:61:9f:d3:d7:e2:c3:af:ef:9e:df:
e8:f9:73:53:35:0f:a1:34:b0:4f:c2:85:3f:da:08:fe:d7:7d:
21:ff:d0:d4:89:5e:7a:20:73:8e:c7:a7:1e:39:44:b5:aa:0b:
dc:9e:4d:7e:33:80:f0:a6:fb:d6:b5:b6:92:3b:bc:51:5b:a9:
3f:c1:da:ec:f6:04:5d:13:e5:3a:60:5c:d6:b1:93:b8:f7:f8:
71:4d:87:0c:a9:ab:c1:c1:30:56:c3:3a:5d:2d:4c:78:97:86:
7d:0b:32:eb:a3:31:49:c3:a3:4e:5e:17:12:25:9d:3f:88:a1:
fd:b4:8a:04:97:a4:a1:5d:6f:06:f9:c0:92:28:7f:e1:1b:6f:
9a:1f:14:73:9f:2e:25:bf:9e:03:ab:da:7d:3e:ed:1c:50:68:
7b:03:53:a8:ca:b3:8a:8c:d3:0b:6d:8b:2a:35:e7:8f:ec:24:
0f:1b:21:36:a4:75:d1:84:a9:0f:79:81:10:cf:c8:c1:75:06:
86:aa:e9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:49:22 2025 by rpki-client